Analysis Report https://certified1.box.com/s/2ta9r7cyn5g09fblryd9xqqpnfxbjqej

Overview

General Information

Sample URL:	https://certified1.box.com/s/2ta9r7cyn5g09fblryd9xqqpnfxbjqej
Analysis ID:	321181
Most interesting Screenshot:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Antivirus detection for dropped file

Yara detected HtmlPhish_7

Machine Learning detection for dropped file

Phishing site detected (based on image similarity)

Allocates a big amount of memory (probably used for heap spraying)

Classification

Signatures

AV Detection:

Antivirus detection for URL or domain

Source: https://acctinvcing.net/probate/law/fl/	SlashNext: Label: Fake Login Page type: Phishing & Social Engineering
Source: https://acctinvcing.net/probate/law/fl/	UrlScan: Label: phishing brand: onedrive			Perma Link

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\fl[1].htm

Avira: detection malicious, Label: HTML/Infected.WebPage.Gen2

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\Law%20Offices%20of%20David%20R.%20Carlisle,%20P.A.[1].pdf

Joe Sandbox ML: detected

Phishing:

Yara detected HtmlPhish_7

Source: Yara match	File source: 216865.0.links.csv, type: HTML
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\fl[1].htm, type: DROPPED

Phishing site detected (based on image similarity)

Source: https://acctinvcing.net/probate/law/fl/images/Onedrive-logo.png

Matcher: Found strong image similarity, brand: Microsoft

Jump to dropped file

Software Vulnerabilities:

Allocates a big amount of memory (probably used for heap spraying)

Source: iexplore.exe

Memory has grown: Private usage: 0MB later: 107MB

Source: unknown

DNS traffic detected: queries for: certified1.box.com

Source: preview[1].js.2.dr	String found in binary or memory: http://blog.stevenlevithan.com/archives/parseuri
Source: core.min[1].js.2.dr	String found in binary or memory: http://rock.mit-license.org
Source: preview[1].js.2.dr	String found in binary or memory: http://www.box.com)
Source: {A180D322-2B83-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://acctinvcing.ne
Source: {A180D322-2B83-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://acctinvcing.ne.box.com/s/2ta9r7cyn5g09fblryd9xqqpnfxbjqej
Source: Law%20Offices%20of%20David%20R.%20Carlisle,%20P.A.[1].pdf.2.dr	String found in binary or memory: https://acctinvcing.net/probate/law/fl)
Source: fl[1].htm.2.dr	String found in binary or memory: https://acctinvcing.net/probate/law/fl/
Source: ~DF5F7CDB3C36576714.TMP.1.dr	String found in binary or memory: https://acctinvcing.net/probate/law/fl/yn5g09fblryd9xqqpnfxbjqej
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/android-chrome-192x192-96i97M.png
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/apple-touch-icon-114x114-busq-D.png
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/apple-touch-icon-120x120-K-u4U5.png
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/apple-touch-icon-144x144-va9pYs.png
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/apple-touch-icon-152x152-r5tWgh.png
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/apple-touch-icon-180x180-tV001c.png
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/apple-touch-icon-57x57-fLlEpj.png
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/apple-touch-icon-60x60-Uv0qzu.png
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/apple-touch-icon-72x72-7aVqne.png
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/apple-touch-icon-76x76-ZVGnRV.png
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/browserconfig-fdBReK.xml
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/favicon-16x16-_kQSW4.png
Source: imagestore.dat.2.dr, 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/favicon-32x32-VwW37b.png
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/favicon-96x96-XU7UE1.png
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/favicon-yz-tj-.ico
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/manifest-rw1AEP.json
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/mstile-144x144-pllCM8.png
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/notification-favicon-16x16-Ou5N87.png
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/notification-favicon-32x32-brwW_W.png
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/notification-favicon-96x96-TOQ9Kg.png
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/notification-favicon-EHWWyP.ico
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/_assets/img/favicons/safari-pinned-tab-jyt2W4.svg
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/enduser/app.c3b0baa8c4.css
Source: messagecenter~preview-components~uploads-manager-enduser.5ad4c74391[1].css.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Bold.woff)
Source: messagecenter~preview-components~uploads-manager-enduser.5ad4c74391[1].css.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Bold.woff2)
Source: messagecenter~preview-components~uploads-manager-enduser.5ad4c74391[1].css.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Regular.woff)
Source: messagecenter~preview-components~uploads-manager-enduser.5ad4c74391[1].css.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Regular.woff2)
Source: 2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm0.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-woff.css
Source: fl[1].htm0.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/tether/1.4.0/js/tether.min.js
Source: {A180D322-2B83-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://certified1.app.box.com/s/2ta9r7cyn5g09fblryd9xqqpnfxbjqej
Source: {A180D322-2B83-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://certified1.app.box.com/s/2ta9r7cyn5g09fblryd9xqqpnfxbjqejRoot
Source: {A180D322-2B83-11EB-90E4-ECF4BB862DED}.dat.1.dr	String found in binary or memory: https://certified1.app.box.com/s/2ta9r7cyn5g09fblryd9xqqpnfxbjqejvLaw
Source: fl[1].htm0.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.slim.min.js
Source: preview[1].js.2.dr	String found in binary or memory: https://feross.org
Source: style[1].css.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN7rgOUuhv.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN8rsOUuhv.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN_r8OUuhv.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UNirkOUuhv.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem6YaGs126MiZpBA-UFUK0Zdcs.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/mem8YaGs126MiZpBA-UFVZ0d.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/memnYaGs126MiZpBA-UFUKW-U9hrIqU.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/memnYaGs126MiZpBA-UFUKWiUNhrIqU.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/memnYaGs126MiZpBA-UFUKWyV9hrIqU.woff)
Source: css[1].css.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v18/memnYaGs126MiZpBA-UFUKXGUdhrIqU.woff)
Source: bootstrap.min[1].js.2.dr, bootstrap.min[1].css.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: preview[1].js.2.dr	String found in binary or memory: https://github.com/derek-watson/jsUri
Source: bootstrap.min[1].js.2.dr, bootstrap.min[1].css.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: bootstrap.min[1].js.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: core.min[1].js.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: fl[1].htm0.2.dr	String found in binary or memory: https://img1.wsimg.com/tcc/tcc_l.combined.1.0.6.min.js
Source: preview[1].js.2.dr	String found in binary or memory: https://support.box.com

Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: classification engine

Classification label: mal72.phis.win@3/77@11/6

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF556A2E7D56273AE4.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: unknown	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:68 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:68 CREDAT:17410 /prefetch:2	Jump to behavior

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Windows\SysWOW64\Macromed\Flash\ss.cfg

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.235.236.201	unknown	Germany	33011	BOXNETUS	false
185.235.236.200	unknown	Germany	33011	BOXNETUS	false
185.235.236.197	unknown	Germany	33011	BOXNETUS	false
104.16.19.94	unknown	United States	13335	CLOUDFLARENETUS	false
208.109.40.139	unknown	United States	30148	SUCURI-SECUS	false

Private

IP
192.168.2.1

Contacted Domains

Name	IP	Active
certified1.app.box.com	185.235.236.201	true
api.box.com	185.235.236.197	true
public.boxcloud.com	185.235.236.200	true
cdnjs.cloudflare.com	104.16.19.94	true
certified1.box.com	185.235.236.197	true
acctinvcing.net	208.109.40.139	true
img1.wsimg.com	unknown	unknown
code.jquery.com	unknown	unknown
img.secureserver.net	unknown	unknown
cdn01.boxcdn.net	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://certified1.app.box.com/s/2ta9r7cyn5g09fblryd9xqqpnfxbjqej	false		high
https://acctinvcing.net/probate/law/fl/	true	100%, UrlScan, Browse SlashNext: Fake Login Page type: Phishing & Social Engineering	unknown

ID:	321181
Product:	CloudBasic
Start time:	14:55:46
Start date:	20.11.2020
Cookbook:	browseurl.jbs
System description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\VAH5BVXS\certified1.app.box[1].xml	ASCII text, with very long lines, with no line terminators	15DB4BABB0590726737D99FAC5071289	98780A86B20B468BF7A10ADF0C20712DCF99D0E4	A562CB079FE96D1ADCB8F24237ECF841CEF2ECDAE74A4FE55FBB795F56BABB30
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{A180D320-2B83-11EB-90E4-ECF4BB862DED}.dat	Microsoft Word Document	A862B8068962D69A021AAC79191521A0	11F062628089150E230117F643307FE5847EA909	B41366A31779EA709230249880C6B298465BECF6A94BED1207498FA546363B92
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{A180D322-2B83-11EB-90E4-ECF4BB862DED}.dat	Microsoft Word Document	308EE8796603A086D8FB3AE1E1DA961F	3C972365E190D456FA58466637CD6B31A9D363B1	D6DA5F9255ECAF484CB57D8421D1FB4F7161D0D1EC3EEE1D2AC43773D0026358
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{A7FD30D6-2B83-11EB-90E4-ECF4BB862DED}.dat	Microsoft Word Document	E3CF122163C82AB4EDBCCC5AC90F2113	1533DAB4A3318A34BD2E98D6EA7A4EA640F680B7	A51FE085F24ECF487B949875EDB65245E29051FFC3CDF1B9168FCAF1FE1489F2
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat	data	008B387E2BE416C5093088B427FAFA9E	896909849A6F891AAE5879D13CCC3341C3DD7DB0	EC788BC2BB2D240A77B04175F5FD1E4DD6B2391A16BB90E74DEDA243A4AA1D05
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Lato-Bold[1].woff	Web Open Font Format, TrueType, length 118272, version 1.0	AEBA3FDF0CDB79BC1D33688D3E39B592	E3A34C01880116194309B7225A9CBF8001D23407	2D198961EFB291734102AC4281C4E004628960C80B7C378DD8E034D4B7425AD2
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\as-security~change-current-user-role-modal~collaborators~collection-detail-page~content-explorer-mod~244fdb54.62c4dbb45d[1].js	ASCII text, with very long lines, with no line terminators	2C4E0E745D87E29FA3168DCD5F24C8F0	64BA2ADC0283238AC85AAD12ACAB1178D72161D8	64211F7C333CF4953DA868F56097DA1EEE6690F8C825C90D88852DDC89FBAAB2
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\event[1].gif	GIF image data, version 89a, 1 x 1	325472601571F31E1BF00674C368D335	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\exif.min[1].js	ASCII text, with very long lines	0DB669C9033252050E919900AD0BEFA0	23EDB95E1E737E0F23EE6C7CEF07D634236A52E3	ADD547634768E8CE49D67775D02F958597EFD5E6DF2D1077EF4DFC8C0878B688
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\lang-en-US.a91d032a7e[1].js	ASCII text, with very long lines, with no line terminators	26565F864D67D3270B898A34FF9DCC12	5E72229021DCC50C01531799E104C05579546E89	8B9E5392DFB818463147CEFDEC547AB306F9C904C980F81A7AFC39E5FC0CE077
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\mail[1].png	PNG image data, 100 x 87, 8-bit colormap, non-interlaced	D9F81CF593394338BD133AA77B0ECBAF	24AB26A812E74CBB08BB17E495F8852A3DF5A038	2EBC65A696544B8D69ADE5F136250A9548D4BADF1B9AD459E63FF68E7A985C69
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\mem5YaGs126MiZpBA-UN8rsOUuhv[1].woff	Web Open Font Format, TrueType, length 19072, version 1.1	05EBDBE10796850F045FCD484F35788D	07744CFE76B8C37096443A6BCC3FBD04F93AD05B	35EB714D45479FE35586513C7D372CED0AE3E26EB05883950BEA2669C6E802AA
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\mem5YaGs126MiZpBA-UN_r8OUuhv[1].woff	Web Open Font Format, TrueType, length 18668, version 1.1	A7622F60C56DDD5301549A786B54E6E6	D55574524345932DB3968C675E1AEA08C68A456F	6E8A28A0638C920E5B76177E5F03BA94FCDEDD3E3ECD347C333D82876B51C9C0
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\memnYaGs126MiZpBA-UFUKWyV9hrIqU[1].woff	Web Open Font Format, TrueType, length 17668, version 1.1	793B1237017AEACD646FB80911425566	51E3023140BE407FD5FBFD27E0A5D2C30AE66F31	5BB07410994C14D60F72CE3F6E19B172FCD7BC515F9BAEAF1F74C6CC2216E86A
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\messagecenter~preview-components~uploads-manager-enduser.5ad4c74391[1].css	ASCII text, with very long lines, with no line terminators	F2129188D79DCC9425F90ABCCC0B59A7	7E59C068211D195C19C91FE2581BB359FEA828B8	CBB9726F5F3DCA04530F69D2B6C0B60B22E79BA8A0800167EA6AB365B19C95A0
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\office[1].png	PNG image data, 512 x 512, 8-bit colormap, non-interlaced	1AC039422D7C9CEE436B2CAE5C00BD8C	60D9B9A6E2DF337578C35472344F1387775046D8	1500514ADF9E666A3D20530815DF881BC94812C6906A53BD4C216D051D18C372
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\outlook[1].png	PNG image data, 213 x 211, 8-bit colormap, non-interlaced	CACDEE9959D34380D727718FD02B3711	EB971467C555EA2299CC31018C8BC85F67DA59D7	17F02FDB590800C9A21E2B6166F5F22CC54952D58897F09D8E82BB9195BC2071
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\pdf.min[1].js	ASCII text, with very long lines	9A9AC5F2FB76274116C651226A647C95	EEDC500FC742C9762BF5789AE470132B2011AF77	6CF4C965636CFA49500C3A95FDEF2C5F4722FD0367ED26D70A19F1A13DFFE173
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\pdf_viewer.min[1].css	assembler source, ASCII text, with very long lines, with no line terminators	8CE5E0CD4EE723D76683E50A1A3A6C6B	43D9D8CEECAA52C55735CBBF46DA3AE27146018D	5179C456D56674CA0C710DBC43C90DDF2710C716779D53B94BF2A018F31154DA
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\pdf_viewer.min[1].js	ASCII text, with very long lines	C1B5589ABBA40B2ED3D3AE6EB0F45373	D3F971D2C68F79F055E986F687F5F259DAED3226	8FC790E9167754C61FFCD21E2382D2B6F55903C708239A5CDC7A15748F864B1B
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\preview[1].css	ASCII text, with very long lines	E898E68D0654BADB95F259A31D7637E2	524F46C0AA4D7134230009271A950C3220E783A9	6763B76D0534C7533A6524DAEC5195767E2F5F92FB27C952CA719E7529F0A7E5
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\runtime.cd2df39b38[1].js	ASCII text, with very long lines, with no line terminators	660806098A834516106BC68A3461CC28	E19900258BBF0B81EAA4F29E6670D735AA3C6404	D7D4F30BA9C7DBBA0FD8D4809C2006195D02B147FC9A71D981776A072A670322
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\shared-file.928ac08554[1].js	ASCII text, with very long lines, with no line terminators	491D7AE9477AE2C9DD45C64E0C5A2B24	44D9D151D9ED85C7D851BB8134B8E147E5576D8C	B36869FDBB9DE2E6265C817512B9AF78ACA20BC17BDB078D36931BD47C2F40FA
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm	HTML document, ASCII text, with very long lines	31CC9858DE03D7EADA00197EB24A032F	DC03969C3A812C79B90630909E96895A98E488A2	8257424D3E824437340693CDF74FC581E6C69A4BD4969C9596B624035B4FF4C5
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\Lato-Regular[1].woff	Web Open Font Format, TrueType, length 119132, version 1.0	3E4A4FC6317C4C2CF35D7C77EC1789C3	40EA0D8678B92988824193587F707E3AEDC4591F	607EC0A4A29F6A4607F6E0A3CF486E50322DDF66F1F1870150CB69A7061E978D
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\Lato-woff[1].css	ASCII text, with very long lines	E1E5023A4D0B29824C8A6937ED303B03	93159BA90E4ACA126C45282D047E4E1D544AD100	80745E4A131F2F16302232F53845BFA223915A3465369A40A9AA777D2C0A30BD
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\app.c3b0baa8c4[1].css	ASCII text, with very long lines, with no line terminators	DA0E202DA805302CE1C4E5BECBEE6CA1	4AD4B438570CD8E9E39B579268BF17B5CEDAF1FA	CCD4B98F3A5B9E5C62F6842FB0C37EC0AACFAFB8C6C2B6BB15A3E8D28E36F07A
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\content-sidebar.cc775f149b[1].js	ASCII text, with very long lines, with no line terminators	C6FC79EA0543E47A366C6BC66CF80131	F6B2565344B255A4B73A8453EFC4EEB18E8552F5	69EECE28ECD3F2D0677701D092F03886510CD386EAD2289B8398209B1EE1A6B4
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\css[1].css	ASCII text	7AD11B51C8A9918ADE502DA9DE063EFF	ABF598711588628073EE60E294F288AB76EA187A	5A270BD50EF12A93ABAE711C806D6C59D58B0E0D2A9B3463A8268DC3D2EA6857
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\fl[1].htm	HTML document, ASCII text, with very long lines	73B690D91E87641076D5574E2A7D54F9	F60C3520991CE6A65849A259A19284355F5DF666	C518E283537754F8E5166C770C4D1658A5E1E20379F64DAA352DC88EF13C78A4
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\intersection-observer[1].js	ASCII text, with very long lines, with no line terminators	498AAC0CA5A2544927FAF2681402DE59	39F0C1FBF7452CC5568E5E9C499C898272C285CE	542FADAE21CB6CA75B99B8FC0A0FA8E300F18F679FAD27046D23C74C275F59EE
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\landing-devices-bg[1].jpg	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x800, frames 3	55174EA1C3DF4966ED13D25A6223999D	FA1E418627CE2C16FF594A9615B1D53E5F676FFF	C86C4A6731077F1994A8CAECCB1FC06477EA35A5B6ABBB4ABDE1D06B8EF9FF32
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\loading[1].gif	GIF image data, version 89a, 30 x 30	2E4AAFDC48FD2295ADE1A275F1BAE547	D35E3EB9261AEF6827067E9D8D0C8C7B796E0AFB	B3A3C601451C06183AF82CBF2270C4D80F3D5D680EA9960ED0816B506FBB8C33
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\mem5YaGs126MiZpBA-UN7rgOUuhv[1].woff	Web Open Font Format, TrueType, length 18900, version 1.1	1F85E92D8FF443980BC0F83AD7B23B60	EE8642C4FAE325BB460EC29C0C2C9AD8A4C7817D	EA20E5DB3BA915C503173FAE268445FC2745FC9A5DCE2F58D47F5A355E1CDB18
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\mem5YaGs126MiZpBA-UNirkOUuhv[1].woff	Web Open Font Format, TrueType, length 18696, version 1.1	449D681CD6006390E1BEE3C3A660430B	2A9777AFC07BF0BB4BB48F233ED7C4BCBDB60760	57C79375B1419EE1D984F443CDA77C04B9B38C0BE5330B2D41D65103115FFD72
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\mem6YaGs126MiZpBA-UFUK0Zdcs[1].woff	Web Open Font Format, TrueType, length 17440, version 1.1	06B4BFDA4E139EAF3AB9872A6D66F42F	E5C5999D6AF4869BC60EEA92D1A8C328FB0E1378	39EC493A5A688A85B60A1E889A22CFB93F23C900E0FDC0BE8AB8543DC9DAA783
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\preview-components~shared-file.025da4bcdb[1].js	ASCII text, with very long lines, with no line terminators	81A4E9BF376814968ADA78905E39D8DB	7A30C05118B8723C66EF6E7F8F5A2A5116E0D374	D9912016553DA753EE9624D8CDD0D689100550CF27A821E3508129EA54B28339
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\preview[1].js	UTF-8 Unicode text, with very long lines	CDA61DA2346058CCEC5733DBED9689D2	14CB379F2D4DBF41E0A7F8E47B1960D9DC269B5E	7E427DA9BB71787DBB6FFCFB0CB0D486AAB5508C2C39EC710749F369DAE52A91
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\tcc_l.combined.1.0.6.min[1].js	ASCII text, with very long lines	EE887A633917E8B3D698620C323D28BA	F5E735164514570E664DF50B2F560AD671701153	AA5C1EC4D2EA00EB517EADEB3B65E55B577B7A5ED42D7C2611D15D9050C18350
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\uploads-manager-enduser.0127e52853[1].js	ASCII text, with very long lines	0BC907ED23CC661F30B5F80A09C6FE9A	E67EED8340710BC8A4805A7986BD3A7635469ECD	4297C25EC4FBB4AB76AB48AD62BEB9672D0F7812619789238F2726DD2A5FCC05
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\Law%20Offices%20of%20David%20R.%20Carlisle,%20P.A.[1].pdf	PDF document, version 1.7	BFE95634BB81D858407AF1DBB5E3FEE4	C6D8D976B9B1B72731BED2DD75FFB7EA1562431E	A9F45A3288809426281779FF4CF0C1D3D6B42B05CA6A55FDE37A751A6AFF6921
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\Onedrive-logo[1].png	PNG image data, 170 x 114, 8-bit colormap, non-interlaced	FFC68AE7FD5A2D7A7CEC7185717B6E88	ABBCEBC2E0794C8F30DF0035881D4405D3A1D69B	4603EA1B2F9DF0C9D4F2A253C550FFBAF27EA2CB53ECDE4277B2ACF9DDE33979
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\app.673df980b1[1].js	ASCII text, with very long lines, with no line terminators	7522B90E3BC5E273E2795CC2D72C94C0	32CDD86B893669EE7FE83E04658E9F99EB92C467	9B8793C15E18C443B40BF0FE5232029E3BF3495F6F3320B8B2ED41356F5524FB
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\bootstrap.min[1].css	ASCII text, with very long lines	450FC463B8B1A349DF717056FBB3E078	895125A4522A3B10EE7ADA06EE6503587CBF95C5	2C0F3DCFE93D7E380C290FE4AB838ED8CADFF1596D62697F5444BE460D1F876D
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\lang-en-AU~lang-en-CA~lang-en-GB~lang-en-US~lang-en-x-pseudo.57dba5f597[1].js	ASCII text, with very long lines, with no line terminators	9BCCCA5979199B48DD2DCD6BAC31CDCA	380DBAED126862294356918B0AC8031C00BD492A	860E3603A72F16B016D971C6FA67386D8C1398A44A896F896082B6F7CDF2CC78
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\mem8YaGs126MiZpBA-UFVZ0d[1].woff	Web Open Font Format, TrueType, length 18100, version 1.1	DE0869E324680C99EFA1250515B4B41C	8033A128504F11145EA791E481E3CF79DCD290E2	81F0EC27796225EA29F9F1C7B74F083EDCD7BC97A09D5FC4E8D03C0134E62445
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\memnYaGs126MiZpBA-UFUKW-U9hrIqU[1].woff	Web Open Font Format, TrueType, length 17788, version 1.1	92DA6F116D973BD334CF9B3AFDB29C4F	C7E59C92F4D8391276FB0A3A55528CF3965478E7	49B6274BCCB5C6B31E20CEBB213D96197B522B1FB9C95B8649A0626EDB5BD9D8
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\messagecenter~uploads-manager-enduser.e83b2dda31[1].js	ASCII text, with very long lines, with no line terminators	0301C1A9C6BFCA3D5F81EF8A64E77C2E	3CD3BB4391C82A29191B5B0C9ABB4EE01AFCE8DA	218F4E999ED4F2B19EEAC806BC5D64C8E71F63E7D3336A6FAECE22FB784214FD
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\pdf.worker.min[1].js	ASCII text, with very long lines	8F43F3A32DF23400F995137BD39B3E96	9F368C68F4788C9565EDEA054541683CB6791E3F	1DFAD8C9B4B4981418A528C29A316683E17C222C0D27348264627C57580D2F37
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\preview-components.1db1d2bb04[1].css	ASCII text, with very long lines, with no line terminators	9AF8E1B956E70CCEBD85A9D3160A6DDA	30D31CFBA084F6A1F1DA1C8842730B22FF2CBD2E	040E778FE44D8F018644A17C4DE15DDDB65ABC85F2C81DE51DC10165F8911FC9
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\preview-components.de85f2a6db[1].js	ASCII text, with very long lines, with no line terminators	550BF4EE21DE27BD371ED7E0C84D378F	0330124945A34DAB2E31518AFBCCE67D4D329768	AA5D5A9BB916ED1431A6F6C775D2C0BFF609613EB16742710100997D4729DF46
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\style[1].css	ASCII text	E4C124F84BE2A66C6069E569257E6CF3	E9B6E3207CEAF681F763A49EBCD71837A8EA5CFB	4DA858A3EC305F55BAFB14B408E69398AE8E7AA76AC67025EEC6A2534C592B64
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\uploads-manager-enduser.c5bb181ca1[1].css	ASCII text, with very long lines, with no line terminators	2736E5D199EFCFE06501B7F72B3F5DD2	B9B553FBB2DFE567111B7D51CF682EB72D9EB9C6	6557DF16669DDFB8E5BF239CC8004991B1483568090013310857002CD051B85A
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\vendors~app.6d3735012d[1].js	ASCII text, with very long lines	F5CCF3FD41C7A27A15DFC7A77672C617	0D3A4254B2AB25D3046B535BCE0A9F03557A8DF4	00509D3DEDCCCC67021F47CCE3317798F6620D3A87C99DA9BAD9859DDFE30FB2
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\2ta9r7cyn5g09fblryd9xqqpnfxbjqej[1].htm	ASCII text, with CRLF line terminators	FDA44910DEB1A460BE4AC5D56D61D837	F6D0C643351580307B2EAA6A7560E76965496BC7	933B971C6388D594A23FA1559825DB5BEC8ADE2DB1240AA8FC9D0C684949E8C9
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\bootstrap.min[1].js	ASCII text, with very long lines	14D449EB8876FA55E1EF3C2CC52B0C17	A9545831803B1359CFEED47E3B4D6BAE68E40E99	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\content-sidebar.980195ed31[1].css	ASCII text, with very long lines, with no line terminators	159F5E7E94AF878664C6490270CD2998	EFB4B60AF7A7BB6E543339B4016A60BDC78C7D41	6E5D870B3EE59E9DAD6A378F1E264C193830BD895FAF1145383E709714A82D76
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\content[1].jpg	[TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=1], baseline, precision 8, 791x1024, frames 3	78323C29D0604377E7BD527442FB21D4	9C98E0F638C75C796808A26E9747545FBDD586E7	85EDD4AC2972E58418D80A7D5197DDB2D6878FD8976604747A2367826EF443B2
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\core.min[1].js	UTF-8 Unicode text, with very long lines, with LF, NEL line terminators	8F402D83489BA25EF87CDFC67BF47932	EFBCAE4F111F6CECF56E1B88857F688EEECABAF1	50DA66E885D183593100789E7376D6171310D22F64E798A1DDA6AD5940CF0967
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\favicon-32x32-VwW37b[1].png	PNG image data, 32 x 32, 8-bit colormap, non-interlaced	86AEDF25C0B3AE1224D92E32D80FFEF8	D75B54256BC48B27E6D7DF1C2A6F4635DE2FE5EE	D1A4A65AC84A381199843B9722E6470470C8093885CF2A6481C2FF0DEF618C64
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\fl[1].htm	HTML document, ASCII text	1F549B862E620F54D9862581BAD94531	4A580CD7D23DEA4D0A4D81760CA95D47EA59D825	1A74ACD115D9AE322246181C7CC049650616B833733CE5660371A80DD8877E9A
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\jquery-3.1.1.slim.min[1].js	ASCII text, with very long lines	550DDFE84A114F79A767C087DF97F3BC	310BD0C04196573315C2E8446776685AC2961724	FD222B36ABFC87A406283B8DA0B180E22ADEB7E9327AC0A41C6CD5514574B217
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\memnYaGs126MiZpBA-UFUKWiUNhrIqU[1].woff	Web Open Font Format, TrueType, length 17452, version 1.1	BF72679CA22E53320BEAEA090E8BB07D	F3BAA33E986EC10D6F0C8211A826242441D52CC7	1E742589D91A4B7E3888284A43A73675F312D3D6C4E78B3B76EBC36292646100
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\memnYaGs126MiZpBA-UFUKXGUdhrIqU[1].woff	Web Open Font Format, TrueType, length 17492, version 1.1	56E5756B696615D6164A625E1BCB1A9E	E2AEF56F577DBB78254066B73C2D0FBE30B40AE0	BB87838929C15E1D0A05693C375323B95B6B4690FE207D3639E3A432C44AEF35
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\messagecenter~preview-components~uploads-manager-enduser.47316ec259[1].js	ASCII text, with very long lines	DA3F16AB4CA65D3EE63CC55A5AA7327C	E2218E12470DC87931C2DF298E9B744ED763AD64	4B657AED6C723670748A9AFC331142E156B44F039C6C73A190A34CA9B49BE98D
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\preview-components~shared-file.a722bfdd1a[1].css	ASCII text, with no line terminators	0628C102A3DA83FE10C4AC340F055329	F290C0DC982CA76807C00EEAE59B3335983BBDC4	B23D25ACC423D13F6DE5278961700C672B481E93EC189A8179BF27AE43824279
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\promise[1].js	ASCII text, with very long lines, with no line terminators	B669DFC7109AB90A425DB6A9349E92F5	0EF23DF3B07C637DB6DDF6766EFC8A2A528C1C0E	977A170836C79F74599A27B28F7A487ABB29EBB5E50EB0CD303FB70617A1CE13
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\shared-file.4cf55aafc4[1].css	ASCII text, with very long lines, with no line terminators	30DBAF1AA2461B67BD0FBA1F018B7A8F	EB99C8D6124599E57C219DA1591D0F90DE9A68B6	7491367269A0C97C9EF859DBB361062FAB032FCF2F2807683A05ACA2A91245A8
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\tether.min[1].js	ASCII text, with very long lines, with no line terminators	ECDFD3DC464CEDA5F483BB5C96A6E3D2	CBDD0A2B2DD7A9CFC5DB3F33E34323AFA0CA55A3	80BD626EB6D57112072A508EE4E5CE3C2FE5673FE0A5D029810033B24AAA5E9F
C:\Users\user\AppData\Local\Temp\dat729B.tmp	Web Open Font Format, TrueType, length 119132, version 1.0	3E4A4FC6317C4C2CF35D7C77EC1789C3	40EA0D8678B92988824193587F707E3AEDC4591F	607EC0A4A29F6A4607F6E0A3CF486E50322DDF66F1F1870150CB69A7061E978D
C:\Users\user\AppData\Local\Temp\dat72DA.tmp	Web Open Font Format (Version 2), TrueType, length 84396, version 2.983	8A54EA1AEB67D07C751BD5F03068317B	CFBEE4F2FD7F359A2A60648BB6797CAC1FD4DA3E	4230A20B841519BDBE4B0C154BAD414E017CF80B3918127D45C4F907EEA07280
C:\Users\user\AppData\Local\Temp\dat9056.tmp	OpenType font data	7467AD2A5FEC9238BC4C4E62F3B9FCB4	D61FA52E93B827D3DE9D19C2CDC3C39288E6689D	D67C055903A629DE575DB53CA9AACC4C582DBDBA16C8B59C2EE3CAE31DC6D69B
C:\Users\user\AppData\Local\Temp\dat90A5.tmp	OpenType font data	9DCFA08A128D11804108D515C0C26177	A1EA4E1CEF30D6FD7BE8D154C6B8FA673E50DC59	5270DB122288ECFEBED89D94AD6116E2E05403E46AEE9DE3B84A948E63086378
C:\Users\user\AppData\Local\Temp\dat90D5.tmp	TrueType Font data, 13 tables, 1st "OS/2", 20 names, Macintosh, \251 2018 Microsoft Corporation. All Rights Reserved.	293C450D15E0DA53E1453F4F36871DDF	2551404D449CFEA85F2BDCE8440D262F11A6A655	38786374BD4DC511E4F3EFB62D9659CE5D8B7E2E2163E7FEB8FC9EA61F0D15B3
C:\Users\user\AppData\Local\Temp\~DF556A2E7D56273AE4.TMP	data	936087800349043E516EC5613EE9613C	107082B02756371178E2698DC05C15744C8244AE	97945E2858EEF8BBD0420DEE0D61017711157DBBAC1B258AB22BC4F2A70EAF40
C:\Users\user\AppData\Local\Temp\~DF5BA70A95F3437082.TMP	data	AB889A32AB9ACD33E816C2422337C69A	1190C6B34DED2D295827C2A88310D10A8B90B59B	4D6EC54B8D244E63B0F04FBE2B97402A3DF722560AD12F218665BA440F4CEFDA
C:\Users\user\AppData\Local\Temp\~DF5F7CDB3C36576714.TMP	data	443CAD346745D1CFAC435F1D8F54F363	886ADFE8BE8F33C786AE8DDC672B18C1CC7643E5	0EDB5C088F6134E146DEA5B06CEB84BFCB97E63275627D89A34C0278EBBB1DBA

Analysis Report https://certified1.box.com/s/2ta9r7cyn5g09fblryd9xqqpnfxbjqej

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection:

Phishing:

Software Vulnerabilities:

Networking:

System Summary:

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs